Path to this page:
Subject: CVS commit: [pkgsrc-2009Q2] pkgsrc/www/viewvc
From: Matthias Scheler
Date: 2009-08-19 10:55:15
Message id: 20090819085515.9B44F175D0@cvs.netbsd.org
Log Message:
Pullup ticket #2866 - requested by adrianp
viewvc: security update
Revisions pulled up:
- www/viewvc/Makefile 1.10
- www/viewvc/distinfo 1.7
---
Module Name: pkgsrc
Committed By: adrianp
Date: Sat Aug 15 08:33:13 UTC 2009
Modified Files:
pkgsrc/www/viewvc: Makefile distinfo
Log Message:
Version 1.0.9 (released 11-Aug-2009)
* security fix: validate the 'view' parameter to avoid XSS attack
* security fix: avoid printing illegal parameter names and values
Version 1.0.8 (released 05-May-2009)
* fix directory view sorting UI
* tolerate malformed Accept-Language headers (issue #396)
* fix directory log views in revision-less Subversion repositories
* fix exception in rev-sorted remote Subversion directory views (issue #409)
Files: